It seems like the system for sending out packages should've been designed to be unless this is being sent out as a critical security patch (and signed off by a

It seems like the system for sending out packages should've been designed to be unless this is being sent out as a critical security patch (and signed off by a security manager or something in the log), the package is deployed to 5% of the fleet per day (unless someone opts in to get it early for some reason on a package-by-package basis). In a big fleet, anything else would still be chaos if someone clicked the wrong button.